Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:1631-1

Опубликовано: 07 окт. 2020
Источник: suse-cvrf

Описание

Security update for kdeconnect-kde

This update for kdeconnect-kde fixes the following issues:

kdeconnect-kde was updated to fix various security issues in its default enabled network service (CVE-2020-26164, boo#1176268):

Список пакетов

openSUSE Leap 15.1
kdeconnect-kde-20.04.2-lp152.2.3.1
kdeconnect-kde-lang-20.04.2-lp152.2.3.1
kdeconnect-kde-zsh-completion-20.04.2-lp152.2.3.1
openSUSE Leap 15.2
kdeconnect-kde-20.04.2-lp152.2.3.1
kdeconnect-kde-lang-20.04.2-lp152.2.3.1
kdeconnect-kde-zsh-completion-20.04.2-lp152.2.3.1

Ссылки

Описание

In kdeconnect-kde (aka KDE Connect) before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memory, or network connection slots, aka a Denial of Service attack.

Затронутые продукты
openSUSE Leap 15.1:kdeconnect-kde-20.04.2-lp152.2.3.1
openSUSE Leap 15.1:kdeconnect-kde-lang-20.04.2-lp152.2.3.1
openSUSE Leap 15.1:kdeconnect-kde-zsh-completion-20.04.2-lp152.2.3.1
openSUSE Leap 15.2:kdeconnect-kde-20.04.2-lp152.2.3.1
Ссылки